$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft File: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft (raw, json) Hash identifier: 5nvXiLib2PioOBZG407dWxxvp/ztnQ6LxHTmyN5bjgw= Subject key identifier: D3:14:BA:F9:FF:76:99:D7:AE:29:FE:B2:08:A7:CB:B3:01:A3:1E:E2 Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Certificate serial: 5CC25AE102EAB59F4A06ECDE092A4EE6DC59A135 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft Manifest number: 037F Signing time: Wed 25 Mar 2026 08:20:58 +0000 Manifest this update: Wed 25 Mar 2026 08:15:58 +0000 Manifest next update: Sat 28 Mar 2026 11:13:58 +0000 Files and hashes: 1: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: 18AbUsVhIGEQ6HCFJXdnQ22A4WQNqI+V6DxuOgi205k=) 2: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI=) 3: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl (hash: hrn3AnOjBC1Jv8/LlDNxzu6OGt/Qj75XcXDgzitNlP0=) 4: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: dQbf3sVA4jaVic2L+O9XI1H3j7ymjWLOW6r+meQnacg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c2:5a:e1:02:ea:b5:9f:4a:06:ec:de:09:2a:4e:e6:dc:59:a1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Validity Not Before: Mar 25 08:15:58 2026 GMT Not After : Mar 28 11:13:58 2026 GMT Subject: CN=D314BAF9FF7699D7AE29FEB208A7CBB301A31EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ce:25:89:39:92:34:e6:7d:ab:b9:c5:9d:a1: 6e:7b:aa:4b:34:11:35:31:a8:af:92:75:28:83:fc: cd:1f:01:87:7c:bf:4a:c6:e5:5b:ed:25:4d:95:41: f3:56:37:37:bb:5f:27:19:4a:19:9c:81:98:26:07: d9:46:2f:59:88:50:1c:9e:94:fa:d3:4e:89:74:33: 96:6a:e5:44:b3:7b:bf:e0:7e:0a:5c:23:38:21:f4: 6f:49:45:ca:07:99:3d:ab:5c:b4:7d:81:1c:aa:2e: bd:9b:bf:37:e1:ac:9c:b6:7a:19:d6:9a:46:bc:9f: 20:90:3d:c8:e5:40:a4:3f:be:20:fc:c4:f2:88:50: f2:3d:2b:f2:a6:f6:e3:8b:17:25:e1:41:c3:93:8f: b5:65:fe:ff:88:34:10:1b:d4:c0:7e:9d:d1:3d:ed: af:c4:2e:eb:bd:4f:be:9b:9e:84:cc:d3:0f:33:ae: 03:9c:a0:54:a1:18:ca:13:2d:4c:44:81:44:6f:66: 36:11:4d:81:3e:92:b0:16:fd:b7:bb:56:d9:86:ff: 4f:2e:f6:fe:08:e3:3d:03:70:89:93:99:27:9f:b6: 85:4e:4d:63:05:a9:73:ee:1d:7d:fc:2f:03:41:f2: 3c:da:25:04:90:c9:e2:cd:8d:a1:0f:dc:1f:3a:b6: 34:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:14:BA:F9:FF:76:99:D7:AE:29:FE:B2:08:A7:CB:B3:01:A3:1E:E2 X509v3 Authority Key Identifier: keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b6:0a:82:2f:59:6b:5b:79:6b:24:d7:77:c7:ff:8f:0b:c9: 8e:e1:d0:cb:65:be:c3:4e:6f:4b:b0:ac:da:2b:8b:0d:5d:bd: 1f:28:9a:38:d3:da:19:a0:f6:a7:57:13:86:52:4e:3c:c2:d9: 42:00:37:77:8b:98:fe:59:d2:ac:92:c1:b2:8b:b6:87:1a:b6: ab:34:05:1d:99:53:e3:a1:ff:a8:2f:cb:23:9a:81:e8:d4:d5: b9:42:63:8e:e8:e6:a6:4e:2f:1e:7d:6d:70:dc:10:97:80:37: 06:a9:13:67:d4:e9:0f:fe:6f:e1:e8:78:a6:22:0e:14:08:36: f4:17:2c:bc:e7:f1:74:67:42:fd:0c:4b:3f:9b:84:1b:92:e9: fe:9b:6a:10:4a:5c:8c:b8:51:20:be:b7:be:b6:06:de:03:11: f7:dd:cf:68:ba:70:40:ee:39:69:b0:99:1c:0e:14:84:fa:68: 3d:56:b4:41:5b:aa:8e:21:82:b0:e3:b7:bb:30:14:73:54:69: b7:f1:9a:f3:d8:a0:a1:ea:7f:27:af:b5:a7:3a:33:22:83:a6: 92:01:de:56:a0:a6:ae:46:04:51:0f:23:8a:77:7c:11:4e:da: 63:de:82:73:08:78:a9:a9:b4:1d:cc:01:39:4d:52:d5:83:ce: ee:24:c2:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMJa4QLqtZ9KBuzeCSpO5txZoTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJE Qzk1RkFGNTAeFw0yNjAzMjUwODE1NThaFw0yNjAzMjgxMTEzNThaMDMxMTAvBgNV BAMTKEQzMTRCQUY5RkY3Njk5RDdBRTI5RkVCMjA4QTdDQkIzMDFBMzFFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ziWJOZI05n2rucWdoW57qks0 ETUxqK+SdSiD/M0fAYd8v0rG5VvtJU2VQfNWNze7XycZShmcgZgmB9lGL1mIUBye lPrTTol0M5Zq5USze7/gfgpcIzgh9G9JRcoHmT2rXLR9gRyqLr2bvzfhrJy2ehnW mka8nyCQPcjlQKQ/viD8xPKIUPI9K/Km9uOLFyXhQcOTj7Vl/v+INBAb1MB+ndE9 7a/ELuu9T76bnoTM0w8zrgOcoFShGMoTLUxEgURvZjYRTYE+krAW/be7VtmG/08u 9v4I4z0DcImTmSeftoVOTWMFqXPuHX38LwNB8jzaJQSQyeLNjaEP3B86tjQ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0xS6+f92mdeuKf6yCKfLswGjHuIwHwYDVR0j BBgwFoAUem5/45FS0cwXT2kiFD+q69yV+vUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTJjMTM4Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC83QTZFN0ZFMzkx NTJEMUNDMTc0RjY5MjIxNDNGQUFFQkRDOTVGQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJEQzk1 RkFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFB RUJEQzk1RkFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAe2CoIvWWtbeWsk13fH/48LyY7h0MtlvsNO b0uwrNoriw1dvR8omjjT2hmg9qdXE4ZSTjzC2UIAN3eLmP5Z0qySwbKLtocatqs0 BR2ZU+Oh/6gvyyOagejU1blCY47o5qZOLx59bXDcEJeANwapE2fU6Q/+b+HoeKYi DhQINvQXLLzn8XRnQv0MSz+bhBuS6f6bahBKXIy4USC+t762Bt4DEffdz2i6cEDu OWmwmRwOFIT6aD1WtEFbqo4hgrDjt7swFHNUabfxmvPYoKHqfyevtac6MyKDppIB 3lagpq5GBFEPI4p3fBFO2mPegnMIeKmptB3MATlNUtWDzu4kwk4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:41:38 2026 by rpki-client